sasas

14 ms·

91.
by sasas 9y ago
Here they left the door wide open. Google does not leave the door wide open. Google does not have perfect security. But we expect them to make the cost to an attacker high enough that it requires massive investment for a successful breach.
92.
by sasas 9y ago
This is not a technical failure; it's a failure in basic house keeping. For a company that size you would expect processes in place such as a maintained asset register and patch maintenance in place. Not having these controls in place
93.
by sasas 9y ago
I have one of the soundlazers. Hardly use it because it's particularly punishing on the ears even at low volumes. Was fun bringing into the office and reflecting sounds off the roof into other cubicals...
94.
by sasas 9y ago
The vulnerabilities have public proof of concept code. You literally get a shell on the machine. I wont link examples here, but they are east to find.
95.
by sasas 9y ago
Oh yes they can thrive .. for quite a while .. remember Jordan Belfort? https://en.m.wikipedia.org/wiki/Jordan_Belfort
96.
by sasas 9y ago
Skip the CEH and go straight for the OSCP. It's much more valued. Many in the industry seentu CEH as a joke. Good luck!
97.
by sasas 9y ago
The article states - "He faces charges related to creation of the Sakura malware, which the FBI has said was used the breach." The grugq's response on this matter - "The chilling effect of the US charging tool developers
98.
by sasas 9y ago
> Oh, also I used the VIP and NEO at one point with LastPass and they worked great Have you tried logging into LastPass on your mobile device? It doesn't require the token - effectively bypassing the point of requiring a hardware to
99.
by sasas 9y ago
If you want to avoid a warning, then yes. That said, is it such a bad thing for enterprises to ramp up the use of HTTPS in their internal networks? This can help prevent some MITM attacks from attackers to breach the perimeter. Enterprises
100.
by sasas 9y ago
There is a lesson here. In comparison, Notch appears very dissatisfied despite his accumulation of wealth.
101.
by sasas 9y ago
According to Andrew Mabbitt - "He stayed in our villa for free. He didn't pay for the car. He didn't pay for a helicopter ride. He didn't pay for concert tickets..." [1] He takes home a 6 figure salary [2] [1] http
102.
by sasas 9y ago
Either the Australian government is incredibly incompetent or they are outright lying to the public. From the article - He (Senetor Brandis) said he met the British government’s chief cryptographer last week and believed it was technically
103.
Australian government plans to force tech giants to decrypt messages(news.com.au)
4 points by sasas 9y ago|1 comments
104.
by sasas 9y ago
A few VPN providers offer this, I.e torguard's stealth VPN option. https://torguard.net/stealth-vpn.php
105.
by sasas 9y ago
Risk Biz has more details [1].. Recommend the podcast! * IBM and the ABS were offered DDoS prevention services from their upstream provider, NextGen Networks, and said they didn't need it. * This plan was activated when there was a sma
106.
by sasas 9y ago
Here is a previous HN discussion on the topic - https://news.ycombinator.com/item?id=12661227
107.
by sasas 9y ago
> Speaking from personal experience here, Reddit can't and won't defend your information. Could you elaborate on your experience?
108.
by sasas 9y ago
Looks like it has been done - https://hackaday.com/2016/08/09/how-to-detect-and-find-rogue...
109.
by sasas 9y ago
You could possibly achieve interesting results with a single handset to keep in your pocket as you go about your day. The Samsung Galaxy S3 is ideal due to the fact that Android apps are written to access low level data from it's baseb
110.
by sasas 9y ago
He applied for GHCQ but while waiting for clearance, he was offered a better job offer. https://www.malwaretech.com/2016/05/infosec-without-degree.h...
111.
by sasas 9y ago
> The people behind wannacry targeted Russian banks. Do you have a reference for this?
112.
by sasas 9y ago
The vulnerability used by this worm could have been mitigated by disabling SMBv1, hardening the machine, network segmentation .. the list goes on. If you couldn't patch, you could have still prevented this worm from impacting you organ
113.
by sasas 9y ago
Malware tech need recongnition! By being the first to register the hard coded domain in the malware they have slowed the spread significantly ... https://twitter.com/josephfcox/status/863171107217563648
114.
by sasas 9y ago
Here is a link to the malware sample and technical implementation details. https://gist.github.com/rain-1/989428fa5504f378b993ee6efbc0b...
115.
by sasas 9y ago
Patrick Grey interviewed the CTO of hacker one in the latest riskybiz security podcast [1] on this topic. Patrick is a friend of Alex, but that doesn't stop a hearty debate. Highly recommended podcast for those interested in infosec in
116.
by sasas 9y ago
> We see credential stuffing quite a lot Thanks for sharing. Super interested to know what line of work you are in?
117.
by sasas 9y ago
> a clone, because that is its stated aspiration. Thanks for the clarification. In that context then calling it a clone makes perfect sense. All the best to the project. LittleSnitch is great and to have a full clone on Linux would be fa
118.
by sasas 9y ago
Connection requests shouldn't be a performance issue on a standard desktop.
119.
by sasas 9y ago
It's not a clone. LittleSnitch is more functionally rich. The name is misleading. You can take pcap traces on applications, plot bandwidth usage and more. Little snitch is closer to GlassWire for Windows [1] then OpenSnitch. [1] https
120.
by sasas 9y ago
Out of the box, Ubuntu doesn't behave well. [1] Let's not forget applications such as browser plugins. https://fixubuntu.com/ [1]

More ›